{ "version": "https://jsonfeed.org/version/1.1", "title": "testimo", "home_page_url": "https://evotec.xyz/es/tags/testimo", "feed_url": "https://evotec.xyz/es/tags/testimo/index.feed.json", "description": "Evotec Main Website", "items": [ { "id": "https://evotec.xyz/es/blog/finding-duplicate-spn-with-powershell", "url": "https://evotec.xyz/es/blog/finding-duplicate-spn-with-powershell", "title": "Finding duplicate SPN with PowerShell", "summary": "Duplicate SPNs aren\u2019t very common but can happen in any Active Directory as there\u2019s no built-in way that tracks and prevent duplicate SPN\u2019s. One has to either know all SPN\u2019s in the environment, track them or check each time whether it already exists or not. Things get more complicated with larger Active Directory environments as people change, new apps are added, old apps are forgotten, but SPNs prevail.", "date_published": "2021-12-07T15:32:01.0000000Z", "tags": [ "active directory", "ad", "adessentials", "forest", "powershell", "spn", "testimo" ] }, { "id": "https://evotec.xyz/es/blog/active-directory-domain-services-could-not-replicate-the-directory-partition-the-replication-operation-encountered-a-database-error", "url": "https://evotec.xyz/es/blog/active-directory-domain-services-could-not-replicate-the-directory-partition-the-replication-operation-encountered-a-database-error", "title": "Active Directory Domain Services could not replicate the directory partition \u2013 The replication operation encountered a database error", "summary": "If you ever encounter an error while trying to create a new domain within a forest saying, \u201CThe replication operation encountered a database error,\u201D it makes you sweat a bit. Your brain tells you it will be a nightmare to fix, do I have proper backups to make it happen, and the question \u201Cwhy now\u201D shows up.", "date_published": "2021-11-28T14:38:20.0000000Z", "tags": [ "active directory", "dcdiag", "dfs", "domain", "forest", "forest replication", "PowerShell", "testimo", "Windows" ] }, { "id": "https://evotec.xyz/es/blog/monitoring-ldaps-connectivity-certificate-with-powershell", "url": "https://evotec.xyz/es/blog/monitoring-ldaps-connectivity-certificate-with-powershell", "title": "Monitoring LDAPS connectivity/certificate with PowerShell", "summary": "Some time ago, I wrote a blog post on checking for LDAP, LDAPS, LDAP GC, and LDAPS GC ports with PowerShell. It mostly works, but it requires a tad bit of effort, and it doesn\u2019t cover the full scope that I wanted. Recently (well over 3 years ago), Chris Dent shared some code that verifies the LDAP certificate, and I thought this would be good to update my cmdlets to support just that with a bit of my own magic on top.", "date_published": "2021-03-02T17:53:05.0000000Z", "tags": [ "active directory", "ad", "ldap", "powershell", "testimo" ] }, { "id": "https://evotec.xyz/es/blog/active-directory-dfs-health-check-with-powershell", "url": "https://evotec.xyz/es/blog/active-directory-dfs-health-check-with-powershell", "title": "Active Directory DFS Health Check with PowerShell", "summary": "One of the critical parts of Active Directory is DFS. It allows you to share same NETLOGON/SYSVOL folders across all Domain Controllers in your Forest. Its health is vital to the functionality of your Active Directory. If it\u2019s broken, a lot of things may not work, and it\u2019s not that easy to tell the status of it. At first sight, everything may seem to work correctly, but if you take a closer look \u2013 not so much. It\u2019s great if you find it out by yourself, but not fun if suddenly GPO\u2019s don\u2019t apply to some users, computers, and you find out a year later.", "date_published": "2020-02-20T20:29:20.0000000Z", "tags": [ "active directory", "adessentials", "dfs", "gpo", "PowerShell", "testimo" ] }, { "id": "https://evotec.xyz/es/blog/what-do-we-say-to-health-checking-active-directory", "url": "https://evotec.xyz/es/blog/what-do-we-say-to-health-checking-active-directory", "title": "What do we say to health checking Active Directory?", "summary": "Setting up a new Active Directory is an easy task. You download and install Windows Server, install required roles and in 4 hours or less have a basic Active Directory setup. In an ideal world that would be all and your only task would be to manage users, computers, and groups occasionally creating some Group Policies. Unfortunately, things with Active Directory aren\u2019t as easy as I\u2019ve pictured it. Active Directory is a whole ecosystem and works well ranging from small companies with ten users to 500k users or more (haven\u2019t seen one myself \u2013 but so they say!). When you scale Active Directory adding more servers, more domains things tend to get complicated, and while things on top may look like they work correctly, in practice, they may not. That\u2019s why, as an Administrator, you need to manage Active Directory in terms of its Health and Security. Seems easy right? Not quite. While you may think you have done everything, checked everything, there\u2019s always something missing. Unless you have instructions for everything and can guarantee that things stay the same way as you left them forever, it\u2019s a bit more complicated. That\u2019s why Microsoft delivers you tools to the troubleshoot your Active Directory, such as dcdiag, repadmin and some others. They also sell monitoring solutions such as Microsoft SCOM which can help and detect when some things happen in your AD while you were gone. Surely there are some 3rd party companies give you some tools that can help with a lot of that as well. Finally, there is lo of folks within the community creating PowerShell scripts or functions that help with some Health Checks of your Active Directory.", "date_published": "2019-09-08T15:48:39.0000000Z", "tags": [ "active directory", "ad", "dhcp", "dns", "health checks", "powershell", "security checks", "testimo", "Windows" ] } ] }